Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa
File:                     3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa (raw, json)
Hash identifier:          mZgUtSsB9LqGLuBdG6f0kHUKhDLZ8rjmhC6DmCe0U/s=
Subject key identifier:   2D:45:C5:86:EE:F9:32:A1:6A:6C:D4:8D:93:A9:69:D4:A9:B2:26:24
Certificate issuer:       /CN=b7364c96-947b-4136-b697-c8cff591a8ec
Certificate serial:       010D0C9F43285849CBCF955AB53185183192A880
Authority key identifier: 95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     16844
IP address blocks:        198.190.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:95:5a:b5:31:85:18:31:92:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7364c96-947b-4136-b697-c8cff591a8ec
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=b218b3e1-c4b9-431d-a865-8381fffc3d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:ce:b7:cb:6c:0b:c4:8c:26:83:b6:28:ca:
                    ff:2a:2c:bb:d8:28:e2:26:3d:78:60:88:0e:a2:29:
                    9c:f8:eb:65:22:ab:9f:75:1b:6f:4c:75:a7:a0:ae:
                    ee:af:4d:50:01:dc:3f:ac:4c:d1:f1:9b:3c:08:c0:
                    51:eb:b6:16:72:00:96:5c:22:49:69:2f:cd:5e:cb:
                    ed:70:df:2b:a7:ba:89:fd:5e:1e:be:ac:fe:ca:ad:
                    8e:6b:e9:e8:05:33:4d:f6:4c:98:03:61:13:ee:bc:
                    80:b7:7b:b3:61:a8:38:99:23:02:f4:a8:db:f4:cf:
                    64:fe:88:db:dc:4e:a9:3b:f8:c5:a3:2e:e0:02:2e:
                    4f:73:cb:8b:3e:e2:05:c4:d8:ba:b6:0d:31:34:cc:
                    68:78:f4:f3:bd:82:8d:69:be:e7:25:b2:14:36:ac:
                    c5:e9:a0:be:13:47:67:d0:92:f7:2e:c8:32:5c:4a:
                    8f:7c:77:dd:74:de:87:d8:7d:4b:6a:12:02:7b:ca:
                    dd:8c:8c:a5:21:eb:88:37:c8:a4:ee:86:d2:d6:34:
                    93:bd:4f:25:78:a9:64:4c:52:b2:1f:80:5a:e1:b5:
                    92:cf:d2:23:7e:4a:c0:55:94:9c:ea:28:7c:e6:71:
                    23:33:92:37:b9:a7:12:e8:b6:a7:85:ad:3e:20:b8:
                    6f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:45:C5:86:EE:F9:32:A1:6A:6C:D4:8D:93:A9:69:D4:A9:B2:26:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl

            X509v3 Authority Key Identifier:
                keyid:95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.190.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:4c:6b:8b:65:4e:04:bf:1a:22:28:f2:dc:19:23:2c:89:d4:
         4a:1a:e0:6d:f8:a9:11:10:dd:02:4a:91:de:61:31:96:ed:ac:
         d5:e1:68:cd:4d:a4:e0:b7:24:52:39:71:8d:9c:77:3b:f5:b0:
         ed:17:30:60:86:5c:8e:bc:be:c5:10:b5:bf:7b:a4:83:4f:df:
         b5:73:82:d5:ba:a3:a8:1b:f0:41:f2:16:08:ff:d4:03:67:21:
         6a:42:2e:64:a5:a8:3c:55:8f:de:c0:36:2f:8b:9f:1a:b2:b7:
         80:6b:d8:1a:04:ff:f7:36:50:16:86:77:55:0c:a1:26:dc:c1:
         95:55:ec:94:e2:46:dd:68:1a:25:e4:c8:83:ea:d5:c3:12:7d:
         2f:06:db:6a:66:22:91:45:f6:10:63:1d:f9:e1:bf:8f:28:1e:
         c9:56:8b:3c:46:ab:22:91:2e:25:65:00:a5:8c:76:50:29:45:
         bd:d5:88:56:92:b4:8b:c9:52:65:17:9f:82:2c:72:80:5d:45:
         29:4a:5c:9b:4c:9c:ac:80:0d:a5:23:63:5f:3a:79:ae:da:11:
         f6:fa:c8:59:8f:e5:d6:98:d3:67:3a:35:5d:d8:64:6c:e1:9a:
         ac:ca:7e:7b:56:30:1b:a0:c6:1b:f4:02:50:6c:93:55:35:64:
         0a:39:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:49:16 2025 by rpki-client